Secunia Logo
Netsikker nu! 2008
 
CVE Reference: CVE-2006-2275
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-2275

Description:
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer."

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/26433

UBUNTU
  http://www.ubuntu.com/usn/usn-302-1

TRUSTIX
  http://www.trustix.org/errata/2006/0026

SAID
  Secunia Advisory: SA20716
  Secunia Advisory: SA21465
  Secunia Advisory: SA22417

REDHAT
  http://www.redhat.com/support/errata/RHSA-2006-0575.html

CONFIRM
  http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm
  http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7c3ceb4fb9667f34f1599a062efecf4cdc4a4ce5

BID
  17955


Return to the previous page.